Swiss Re, the global reinsurance company, has examined how evolving cyber threats and gaps in insurance protection are influencing the market and its prospects for future growth in its latest analysis of the cyber insurance sector.
Swiss Re’s assessment suggests that while the factors driving growth within the cyber insurance market have changed relatively little over the past year, the wider risk environment facing businesses has continued to develop.
The company highlights ransomware, reliance on supply chains, geopolitical tensions and rapid advances in technology as factors changing the nature and scale of organisations’ cyber exposures. AI is an increasingly important part of this picture, with Swiss Re noting that it can support stronger operations and cyber resilience while potentially increasing some existing cyber risks.
Swiss Re says AI has become a major area of focus for the insurance industry because of its potential to alter how insurers operate and make decisions. In cyber insurance specifically, the company considers AI more likely to intensify or modify established cyber risks than to introduce completely new forms of insured loss.
The company also points out that existing commercial cyber policies may already provide cover for certain incidents involving AI. This is partly because AI models may fall within policy definitions of computer systems. Depending on the circumstances, losses resulting from AI-related incidents could therefore be addressed through existing sections of commercial cyber policies. Swiss Re says insurers and policyholders will need to establish a clear understanding of how existing policy language applies as AI-related incidents become more common.
The technology is being used on both sides of the cybersecurity equation. Swiss Re says criminals can use AI to identify vulnerabilities more quickly, automate attacks and develop more advanced phishing techniques. Organisations, meanwhile, can apply AI to areas such as threat detection, automated incident response and wider cyber resilience.
Although AI-related cyber claims remain relatively limited at present, Swiss Re says insurers will need to keep track of developments in technology, regulation and claims experience. The company also emphasises the need for clarity over the scope of cover as organisations’ exposures change. Swiss Re links this issue to the wider need for businesses of all sizes to consider whether their cyber protection remains appropriate.
Despite the changing risk environment, Swiss Re reports that global cyber insurance premium growth continues to sit within the single-digit range. According to the company, the compound annual growth rate for cyber premiums has remained at 5% since 2022. Swiss Re forecasts that global cyber insurance premiums will reach USD 16.4 billion in 2026 before rising to USD 17.1 billion in 2027.
The company says cyber insurance continues to deliver relatively strong premium growth compared with other insurance lines, although the overall increase is being constrained by reductions in rates.
Swiss Re’s data shows that global cyber insurance rates have fallen for four consecutive years. The company estimates that the rate reduction became less pronounced in 2026, moving from approximately -13% in 2025 to -5% globally. Swiss Re attributes this partly to greater pricing stability in the US, where insurers have been responding to pressure on profitability. The company says pricing competition remains more pronounced elsewhere, particularly in Europe, where rates are continuing to fall at a faster pace.
With the amount of available insurance capacity still exceeding demand, Swiss Re says the sector faces the dual task of expanding the cyber insurance market while ensuring that pricing, policy limits, coverage language and cybersecurity requirements remain aligned with the risks being transferred.
North America remains the largest cyber insurance market, according to Swiss Re. The company estimates that the region will account for approximately two-thirds of global cyber premiums in 2026, representing around USD 10.7 billion.
Europe is continuing to increase its share of the global market. Swiss Re estimates that the region will account for 21% of global cyber premiums in 2026, equivalent to USD 3.42 billion. The company says this expansion has been supported by investment from global insurance carriers and international cyber MGAs, together with new partnerships aimed at accessing further growth opportunities.
Swiss Re places Asia-Pacific third among the major regional markets, with an estimated 10% share of global cyber premiums, or approximately USD 1.7 billion, in 2026. Latin America and the Middle East and Africa remain considerably smaller markets at present. Swiss Re estimates that each represents around 2% of global premiums, equivalent to approximately USD 0.28 billion in Latin America and USD 0.31 billion in the Middle East and Africa.
The level of insurance take-up also varies considerably between business segments. Swiss Re identifies this difference as one of the main factors behind the cyber insurance protection gap and, consequently, as a potential source of future market growth.
The company says this opportunity could be addressed by bringing organisations without cyber insurance into the market, increasing the limits purchased by existing policyholders, or pursuing both approaches.
Swiss Re estimates that only 5–10% of micro-SMEs and 10–20% of SMEs currently have cyber insurance. Despite these relatively low penetration rates, the company expects the two segments to generate around USD 4.9 billion in cyber insurance premiums during 2026. Swiss Re therefore identifies smaller businesses as an important area for potential future premium growth.
Penetration is considerably higher among mid-market businesses, which Swiss Re estimates at between 40% and 50%. However, the company says the segment still has room for expansion and forecasts approximately USD 4.1 billion in premiums during 2026. Swiss Re sees potential for this growth to come both from businesses purchasing cyber insurance for the first time and from existing policyholders increasing their limits to reflect changes in their exposure.
Large corporates currently account for the largest portion of cyber insurance premiums. Swiss Re estimates that the segment will generate around USD 7.4 billion in 2026, with insurance penetration standing at approximately 60–70%. The company says the scale and frequency of recent attacks affecting sectors such as manufacturing and retail have renewed attention on whether businesses have sufficient cyber insurance protection.
Swiss Re estimates that large corporates currently purchase average cyber insurance limits of approximately USD 120 million in the US and USD 90 million in Europe. The company says these figures indicate that insurance programmes are generally designed around protection from major events rather than smaller and more frequent losses.
Analysis from Swiss Re’s Cyber Claims Database adds another consideration. The company says that during the past five years, an average of ten losses each year would have exceeded the USD 120 million benchmark. Swiss Re says this raises the possibility that some large organisations may not have sufficient limits to cover the scale of losses against which their insurance programmes are intended to protect them.
Swiss Re says losses of this size are mainly linked to ransomware and privacy violations or data breaches. A serious cyber incident can produce several types of financial impact at the same time, including extended digital business interruption, lost income, system restoration expenses, supply-chain disruption and reputational consequences.
The company says the increasing use of AI could contribute to greater digital dependency while also widening organisations’ potential attack surfaces. If this results in larger losses, Swiss Re notes that claims could exceed limits established using historical loss patterns.
For some businesses, Swiss Re therefore suggests that existing average limits could need to increase substantially, potentially doubling in certain circumstances. The company stresses, however, that the appropriate amount of insurance capacity will vary according to factors such as a company’s activities, geographical exposure and individual risk profile.
Swiss Re consequently sees different forms of growth potential across the cyber insurance market. Among SMEs, the main opportunity is to increase the number of businesses purchasing cover. In the mid-market, the company sees scope for both greater penetration and higher limits. For large corporates, the focus is more closely linked to whether existing limits provide adequate protection against increasingly severe losses.
Reinsurance also has a role to play as cyber insurance portfolios expand. Swiss Re says reinsurance allows insurers to manage volatility and accumulation risk, particularly as policy limits increase and organisations become more dependent on digital systems.
Swiss Re says its position as a cyber reinsurer gives its underwriting teams exposure to regional markets and individual clients, providing insight into local market conditions, emerging risks and changing protection requirements.
The company says its international presence also enables it to compare developments across markets and share experience between regions. Swiss Re combines this market knowledge with information from its Cyber Data Lake and training programmes to help clients manage cyber exposures and develop their cyber insurance portfolios.
Swiss Re says the cyber insurance market has previously experienced periods of significant correction, resulting in uncertainty for insurers and policyholders. The company argues that the sector now has an opportunity to use the experience of earlier market cycles when considering future pricing, capacity and coverage decisions.
According to Swiss Re, continued growth in digital dependency and the increasing use of AI are likely to support ongoing demand for cyber risk transfer. The company says this growth will nevertheless need to be accompanied by careful underwriting and measured market development.
